Detections
Analytics
SOL-11.1-040190 - The system must prevent the use of dictionary words for passwords.
Information
The use of common words in passwords simplifies password-cracking attacks.Solution
The root role is required.# pfedit /etc/default/passwd
Insert the lines:
DICTIONLIST=/usr/share/lib/dict/words
DICTIONDBDIR=/var/passwd
Generate the password dictionary by running the mkpwdict command.
# mkpwdict -s /usr/share/lib/dict/words
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_x86_V3R6_STIG.zip
Item Details
Audit Name: DISA Solaris 11 X86 STIG v3r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216103r959010_rule, STIG-ID|SOL-11.1-040190, STIG-Legacy|SV-60925, STIG-Legacy|V-48053, Vuln-ID|V-216103
Plugin: Unix
Control ID: 3e8bd87c53dd2d72d622fa7c980b19232e126e3129b97257cb6c91dea470f9f4